$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c135282-3228-4ddd-beca-26ac3dd348e8.roa File: 4c135282-3228-4ddd-beca-26ac3dd348e8.roa (raw, json) Hash identifier: BoVUgfCRqLr1V8ZJNL4qxeJ0vBNsVRE+sVw5uNgv0lQ= Subject key identifier: 5B:7C:60:17:7A:71:35:46:26:77:D9:1F:82:61:4B:C9:AF:44:2E:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66C2AE11C4559CCB7C3608CA765077D05F20B3F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c135282-3228-4ddd-beca-26ac3dd348e8.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c2:ae:11:c4:55:9c:cb:7c:36:08:ca:76:50:77:d0:5f:20:b3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:c5:0c:d3:2a:7d:72:a4:10:13:34:50:0a: 14:7a:f3:92:b2:4d:da:94:74:c4:63:1a:0f:e8:7e: 76:4b:31:2c:2e:56:c2:72:2b:e6:1e:44:de:3e:df: 45:5e:24:74:81:a8:8a:ea:c9:aa:0b:3a:5e:60:c1: ae:a0:f6:12:6c:eb:ff:61:b8:2c:9e:43:5e:a3:00: aa:5a:18:f6:4c:2c:91:04:70:c4:ca:95:98:8a:d9: 24:3f:45:c4:5f:d8:4c:26:40:7d:cb:25:b6:d0:71: b4:9f:9c:64:a4:79:98:5c:84:aa:a3:0b:78:8a:83: e1:4f:48:90:c5:72:b1:80:55:05:8b:1a:b4:e6:6c: 42:65:90:a8:90:71:72:eb:be:fc:93:d5:ef:4e:98: 43:8c:ec:e4:74:61:db:8c:0c:c6:8f:e0:7f:1d:e1: 5b:e0:8f:a1:3d:33:8a:92:f4:63:82:3a:8a:79:15: c9:fa:63:a2:db:e5:0d:6d:35:1e:b0:6f:dd:28:e8: b6:5b:97:32:4b:86:87:de:17:09:ba:5f:72:69:92: c6:ce:f0:ef:f1:83:4d:0d:22:41:0a:42:c6:82:8a: 38:3a:bb:bc:1e:10:f1:c0:e6:6e:0e:8d:ce:84:22: df:e2:ad:f8:98:49:c5:a3:e9:e6:85:83:cf:de:ef: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:60:17:7A:71:35:46:26:77:D9:1F:82:61:4B:C9:AF:44:2E:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c135282-3228-4ddd-beca-26ac3dd348e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:60c0::/46 Signature Algorithm: sha256WithRSAEncryption 4d:5f:e0:c7:90:58:47:62:64:59:39:ba:eb:9c:e6:30:ae:69: e4:9b:f8:db:2c:da:4b:4b:31:bb:a4:08:01:d0:5a:4c:e8:66: 48:8e:ed:66:c4:88:81:d8:10:cf:cb:db:7f:f7:c2:26:52:78: 61:bd:5d:ac:bf:f4:77:fc:7e:27:ac:d1:ba:7d:40:fd:e0:ee: 9d:ae:f6:b0:d9:3a:a7:e9:f9:5e:df:ae:1d:b0:7c:4d:9f:5f: 0f:2f:c7:c2:05:55:86:de:95:c9:f0:9b:ea:d5:ae:bc:89:62: 6b:a0:43:d3:70:7d:5c:cb:24:7a:b5:b4:10:35:e8:ee:e9:98: 29:b5:f0:ff:85:99:5e:ae:89:1c:f7:fd:2e:bc:ab:e5:ef:ba: a2:d3:44:7a:64:1b:1f:48:20:65:10:0f:42:ea:2b:75:bf:f4: 9a:73:97:8f:82:4a:62:22:93:91:77:4a:21:57:b5:cb:56:f6: 4b:1b:f9:59:d5:eb:74:fb:c5:18:4c:27:d9:fe:82:26:3c:6d: 70:c8:2e:5c:1b:01:bd:51:c5:c1:47:22:cc:2f:3e:da:38:1a: 64:18:52:25:62:e6:e9:86:4a:ac:0f:43:2b:0c:5d:60:50:e3: 45:52:a8:1b:6f:11:7e:61:7d:c3:57:b0:a8:97:a0:51:3a:af: 20:c0:2b:ea -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZsKuEcRVnMt8NgjKdlB30F8gs/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzA1MmZkNzA2MjI5MDcyYmIwOTI0 ZjVkYzAwY2FiMWI5MTk3OGM4YWU3MTA0NWMxMzY2NjY5MTU3NTRhNTEzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf3FDNMqfXKkEBM0UAoUevOSsk3a lHTEYxoP6H52SzEsLlbCcivmHkTePt9FXiR0gaiK6smqCzpeYMGuoPYSbOv/Ybgs nkNeowCqWhj2TCyRBHDEypWYitkkP0XEX9hMJkB9yyW20HG0n5xkpHmYXISqowt4 ioPhT0iQxXKxgFUFixq05mxCZZCokHFy6778k9XvTphDjOzkdGHbjAzGj+B/HeFb 4I+hPTOKkvRjgjqKeRXJ+mOi2+UNbTUesG/dKOi2W5cyS4aH3hcJul9yaZLGzvDv 8YNNDSJBCkLGgoo4Oru8HhDxwOZuDo3OhCLf4q34mEnFo+nmhYPP3u8VYQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFt8YBd6cTVGJnfZH4JhS8mvRC4oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjMTM1MjgyLTMyMjgtNGRkZC1iZWNhLTI2YWMzZGQzNDhlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+2DAMA0GCSqGSIb3DQEBCwUAA4IBAQBNX+DHkFhHYmRZObrr nOYwrmnkm/jbLNpLSzG7pAgB0FpM6GZIju1mxIiB2BDPy9t/98ImUnhhvV2sv/R3 /H4nrNG6fUD94O6drvaw2Tqn6fle364dsHxNn18PL8fCBVWG3pXJ8Jvq1a68iWJr oEPTcH1cyyR6tbQQNeju6ZgptfD/hZlerokc9/0uvKvl77qi00R6ZBsfSCBlEA9C 6it1v/Sac5ePgkpiIpORd0ohV7XLVvZLG/lZ1et0+8UYTCfZ/oImPG1wyC5cGwG9 UcXBRyLMLz7aOBpkGFIlYubphkqsD0MrDF1gUONFUqgbbxF+YX3DV7Col6BROq8g wCvq -----END CERTIFICATE-----Generated at Wed Feb 5 04:01:12 2025 by rpki-client